Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mRLLJEyNj8ismahsGg78GE1dPfY.roa
File: mRLLJEyNj8ismahsGg78GE1dPfY.roa (raw, json)
Hash identifier: v9MxkCwOBLGC9iV+LIecif0zzl1fw3KN3DMtO9roxRk=
Subject key identifier: 99:12:CB:24:4C:8D:8F:C8:AC:99:A8:6C:1A:0E:FC:18:4D:5D:3D:F6
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A97ECE3
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mRLLJEyNj8ismahsGg78GE1dPfY.roa
Signing time: Sat 01 Jan 2022 04:52:19 +0000
ROA not before: Sat 01 Jan 2022 04:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208112
IP address blocks: 82.177.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983035107 (0x3a97ece3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9912cb244c8d8fc8ac99a86c1a0efc184d5d3df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:4b:f3:6d:77:bf:2f:37:bd:26:0b:4c:60:
8b:2f:72:10:1d:d1:3d:81:6f:ae:e5:79:6f:86:d8:
a2:43:85:a6:83:63:67:a1:1c:ba:1f:b4:ac:0f:ce:
1f:3b:4d:df:4a:9e:97:a2:e6:39:b4:bd:84:1f:dc:
7f:75:4f:bb:35:1e:92:0c:91:53:d2:fe:b7:94:7f:
40:41:a6:f4:6b:53:98:bf:b2:d0:d5:8c:9d:78:d6:
d0:80:b2:64:d3:7e:f8:a6:03:96:55:c9:d7:07:06:
e4:06:29:3d:32:fc:ac:22:6b:17:d6:98:26:fe:7a:
57:93:32:e4:76:01:a9:e0:44:b2:a9:f3:d0:13:32:
74:84:78:b7:7e:99:c8:0f:ca:58:cb:c9:8f:4e:62:
43:c8:10:0d:c1:c9:52:41:88:eb:7c:22:7c:0f:cf:
17:d6:fc:ab:99:d6:26:99:50:b2:26:6d:75:a6:a0:
26:ba:9e:6f:a6:af:23:89:56:f5:9c:57:1e:a0:27:
4e:66:62:cc:d4:42:a0:f6:70:79:db:7a:d4:3d:4d:
bb:2a:be:b3:04:88:c7:4b:b2:ac:b8:0f:97:5d:6b:
93:f7:c8:4e:60:ba:36:4f:ee:29:25:f4:f9:8d:3f:
d1:87:fc:f9:6d:a8:bd:90:c3:cb:99:16:de:f5:05:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:CB:24:4C:8D:8F:C8:AC:99:A8:6C:1A:0E:FC:18:4D:5D:3D:F6
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/mRLLJEyNj8ismahsGg78GE1dPfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.2.0/24
Signature Algorithm: sha256WithRSAEncryption
45:18:ad:3a:9e:c7:e5:e6:f8:ce:01:22:10:79:1e:57:49:f4:
76:9b:dc:d9:68:57:a5:c0:b7:ae:1d:84:da:27:5e:61:ee:19:
79:c7:9a:9a:aa:71:9c:62:3c:9c:b5:35:f0:ee:d6:95:6c:0d:
4a:6c:89:97:ec:ea:c5:48:2b:81:e7:52:06:2a:a7:3f:03:6d:
a3:35:26:e2:0c:90:68:de:86:d9:f5:c4:1c:b0:c4:c1:e3:72:
ff:76:25:b1:9b:8d:d9:08:2f:6f:74:24:18:20:53:e1:82:a7:
d2:b2:4b:fb:49:61:37:67:34:6d:29:17:a5:a9:35:21:3e:e4:
5e:9a:cb:4d:db:30:af:7f:ec:8b:27:ec:d9:7b:da:d3:91:eb:
b3:5a:ae:ff:6f:25:18:78:83:01:51:7a:c4:38:a1:8b:cf:42:
94:d0:f8:21:db:ad:e7:3a:d8:22:61:3b:93:93:44:95:a3:e3:
fe:23:60:0f:5a:5d:1c:4a:37:65:3b:17:da:52:cd:29:34:f8:
8a:fc:bc:4a:b2:35:cb:63:49:5a:27:66:ba:91:17:a5:ac:df:
96:9c:69:d6:5b:4e:0b:73:56:75:d0:20:be:6b:70:28:4a:22:
46:2f:f7:90:91:1a:8c:22:70:af:7d:cf:d4:95:d4:c5:9d:3c:
38:23:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org